fix: parse RCM 1149 UserData/EventXML for RDG logins (2.1.13-SAC)

1149 stores username in Param1/Param2 under UserData, not EventData — RDG sessions on
target PCs were skipped with empty User and never reached SAC as rdp.login.success.

This commit is contained in:

PTah

2026-07-13 19:36:56 +10:00

parent 6d5dfbbeed

commit a746a82f2a

2 changed files with 85 additions and 13 deletions

version.txt

+1 -1

View File

@@ -1 +1 @@
 .1.12-SAC
 .1.13-SAC